Cross-transport authentication

• US 8,634,761 B2
• Filed: 06/29/2012
• Issued: 01/21/2014
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lydon, Gregory T.
• Primary Examiner(s): Appiah, Charles
• Assistant Examiner(s): Peaches, Randy
• Application Number:
  US13/538,941
• Publication Number:
  US 20120272297A1
• Time in Patent Office: 571 Days
• Field of Search: 455/3.01
• US Class Current: 455/3.03
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

An authentication controller coupled to a first communication port of a portable media device is allowed to provide authentication on behalf of an accessory device coupled to a second communication port of the portable media device. In one embodiment, a cross transport connector includes a connector configured to couple with an accessory and a connector configured to couple with a portable media device such that the accessory can be coupled to the second communication port of the portable media device. The cross-transport connector also includes an authentication controller. The authentication controller may request authentication from the media device over the first communication port of the portable media device. The request may also include an identifier of the second port, to which authenticated permissions obtained via the first port may be transferred.

Claims

1. An authentication device for use with a portable media device, the authentication device comprising:

a first connector configured to couple the authentication device to a portable media device, wherein the first connector comprises a first communication port;

a second connector configured to couple the authentication device to an accessory, wherein the second connector comprises a second communication port; and

a controller disposed in the first connector, the controller being configured to;

detect connection of the portable media device to the authentication device;

send a cross-transport request to the portable media device, the cross-transport request including (a) a request for authenticating the first communication port and granting a set of permissions to the first communication port and (b) a request to transfer a sub-set of permissions, from the set of permissions, to the second communication port; and

receive an indication from portable media device that the sub-set of permissions was transferred to the second communication port.

2. The authentication device of claim 1 wherein the controller is implemented as a single integrated circuit.

3. The authentication device of claim 1 wherein the controller is further configured to enable communication between the accessory and the portable media device based on the sub-set of permissions.

4. The authentication device of claim 1 further including a device identifier associated with the authentication device.

5. The authentication device of claim 1 wherein the controller includes a memory unit and wherein the memory unit stores a private key associated with the authentication device and an authentication algorithm for use in the request for authenticating the first communication port.

6. The authentication device of claim 1 wherein the authentication device is included in a cable.

7. The authentication device of claim 1 wherein the authentication device is embedded in the accessory.

8. A method comprising:

detecting, by an authentication device, connection of a portable media device to a first port of the authentication device;

sending, by the authentication device, a cross-transport authentication request to the portable media device, the cross-transport authentication request including (a) a request for authenticating the first port and granting a set of permissions to the first port and (b) a request to transfer a sub-set of permissions, from the set of permissions, to a second port of the authentication device, wherein the second port is configured to connect with an accessory; and

receiving, by the authentication device, an indication from portable media device that the sub-set of permissions was transferred to the second port.

9. The method of claim 8 further comprising enabling communication between the accessory and the portable media device based on the sub-set of permissions.

10. The method of claim 8 further comprising receiving an indication from the portable media device that the set of permissions are revoked if the authentication device is disconnected from the portable media device.

11. The method of claim 8 further comprising, prior to sending the cross-transport authentication request, sending a query request to the portable media device requesting information on whether the portable media device supports cross-transport authentication and receiving confirmation that the portable media device supports cross-transport authentication.

12. The method of claim 8 wherein the cross-transport authentication request specifies the first port as a requesting port and the second port as a destination port.

13. An authentication device comprising:

a first communication port configured to couple with a portable media device;

a second communication port configured to couple with an accessory;

an authentication controller coupled to the first communication port and including a processor and a memory,

wherein the authentication controller is configured to;

send a first message to the portable media device, the first message requesting information about whether the portable media device supports cross-transport authentication;

receive a second message from the portable media device indicating that the portable media device supports cross-transport authentication;

send a cross-transport authentication request to the portable media device, the cross-transport authentication request including (a) a request for authenticating the first communication port and granting a set of permissions to the first communication port and (b) a request to transfer a sub-set of permissions, from the set of permissions, to the second communication port;

receive an indication from portable media device that the sub-set of permissions was transferred to the second communication port; and

enable communication between the accessory and the portable media device using the sub-set of permissions.

14. The authentication device of claim 13 wherein the controller is further configured to receive a third message from the portable media device, the third message indicating revocation of the sub-set of permission, if the accessory is decoupled from the portable media player.

15. The authentication device of claim 13 wherein the controller is implemented as a single integrated circuit.